Vulnerability Intelligence

Implementing Vulnerability Intelligence is designed to be a rapid and seamless journey. For the SaaS-based Vulnerability Management Platform, the onboarding process is nearly instantaneous; users can register on the website, configure their target assets, and begin their first external vulnerability scan within minutes. For organizations opting for the Intelligence Database, the implementation involves setting up API keys or integrating the provided data feeds into their existing SIEM or SOC tools. The Enterprise package, which includes an on-premise Virtual Appliance, requires a slightly longer setup time of typically 1-2 business days for virtual machine deployment and initial database synchronization. Throughout the go-live phase, CyberSecurity Help offers technical support to ensure that subscription filters are correctly tuned to the client's specific software environment.

The platform offers extensive customization capabilities, particularly through its tailored subscription filters. Users can precisely define which of the 50,000+ monitored software vendors they wish to track, ensuring they are only alerted to relevant vulnerabilities. The reporting engine is also highly flexible, allowing users to generate on-demand or scheduled reports in HTML, PDF, XML, or JSON formats. For the Vulnerability Management Platform, users can customize scan schedules, include or exclude specific ports, and define custom risk scoring parameters based on their internal security policies. The RESTful API further extends customization by allowing developers to build proprietary internal dashboards or automated remediation scripts based on the platform's data feeds.

CyberSecurity Help maintains a transparent pricing model with few hidden costs. The primary drivers of cost are the number of assets being monitored and the frequency of external scans. In the Standard platform plan, additional assets beyond the base allowance are charged at €4 per month per asset, and additional external scans are priced at €10 each. For the Intelligence Database, costs are generally all-inclusive of the seat count and query limits defined in the chosen tier. However, on-demand security consulting, which is offered as a separate service for deep-dive investigations or incident response assistance, is billed based on the scope of the project. There are no surprise fees for software updates or basic support, as these are integrated into the subscription price.

Training at CyberSecurity Help is delivered through a comprehensive ecosystem of documentation, educational content, and personalized support. The company provides a detailed knowledge base and blog that offers 'How-To' guides, deep-dives into specific vulnerability types, and weekly security summaries. New users have access to an interface manual and technical documentation for API integration. For Enterprise clients, the company offers more hands-on assistance during the initial setup phase. Furthermore, the company's official YouTube channel serves as a training resource, offering video demonstrations of platform features. For organizations requiring deeper expertise, on-demand consulting services are available to provide custom training sessions tailored to specific organizational needs.

Security is built into every layer of the Vulnerability Intelligence platform. The SaaS interface is secured using industry-standard SSL encryption for all data in transit. For its scanning activities, the platform utilizes a non-intrusive, passive fingerprinting technique that identifies software versions without the use of destructive exploits, making it safe for use on production systems. On the backend, customer data is handled according to a strict privacy policy and is stored on secure servers maintained by the company. For organizations with extreme security requirements, the on-premise Virtual Appliance option allows for complete data isolation, ensuring that the vulnerability database and all scan results never leave the client's local network infrastructure.

The Vulnerability Intelligence database is updated in real-time, 24/7. As soon as a new vulnerability is disclosed or an exploit is detected by the company's automated monitors or human analysts, it is added to the database and alerts are dispatched to relevant subscribers. The management platform itself follows a continuous delivery model, with minor UI enhancements and feature updates being rolled out regularly without service interruption. Major version updates for the On-premise Virtual Appliance are typically released on a quarterly cadence, and the company provides detailed release notes for every significant update. This high frequency of updates ensures that users are always working with the most current threat landscape data available.

CyberSecurity Help adheres to a clear data ownership policy where the customer retains full rights to the data generated through their use of the platform. This includes asset lists, scan results, and custom report configurations. In the event of subscription cancellation, users have the ability to export their data in various formats such as PDF or XML to ensure portability. According to the company's terms of service, customer data is treated as confidential and is used solely for the purpose of providing the service. The company does not sell or share customer-specific scan data with third parties, ensuring that sensitive infrastructure details remain the exclusive property of the client.

The product is designed to scale effortlessly as an organization's security needs grow. For small teams, the Community edition and Standard SaaS plans provide a low-barrier entry point. As the infrastructure expands, organizations can seamlessly add more assets and scan licenses on a per-unit basis. For larger organizations, the database subscription tiers (Pro and Enterprise) support increasing numbers of concurrent users (up to 50) and higher monthly query/API limits. The Enterprise tier's ability to monitor up to 500 vendors and process 100,000 API requests per month ensures that the platform can support the most complex and data-heavy security environments without performance degradation.

The contractual terms for Vulnerability Intelligence are governed by Czech Law. Subscription periods are typically annual for the database and monthly for the SaaS platform. The company's refund policy states that most purchases are final and non-refundable, though they reserve the right to issue credits at their discretion if a complaint is made within 60 days of a charge. Service cancellation can be requested at any time via the customer portal, and users remain registered until they explicitly choose to unregister. The terms also include a code of conduct for the API, prohibiting any use that would disrupt the service for other users or involve unauthorized data scraping.

CyberSecurity Help assists organizations in achieving and maintaining compliance with a wide range of international standards. The platform's reports are specifically designed to support audits for GDPR, HIPAA, and PCI DSS by providing evidence of proactive vulnerability management. The vulnerability data itself follows standardized frameworks, including CVSS (Common Vulnerability Scoring System) for severity and CWE (Common Weakness Enumeration) for technical classification. By utilizing a human-verified scanning process, the tool helps organizations meet the 'regular testing and evaluation' requirements of many data protection laws, ensuring that their security posture is both technically sound and legally defensible.